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Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (currently amended) A secure communication method in which a security protocol is 
run below an application-level program to establish a secure communication channel 
for the transfer of application-level data between communicating parties; the security 
protocol operating by the passing of security-protocol protocol data units, PDUs, 
between the parties and including an initial secure key exchange handshake in which at 
least some of the key material is exchanged in security- protocol PDUs arc passed 
between the parties operating the protocol i n , this key material being used to provide at 
least one session key for encrypting application-level data passed between the parties as 
payload in security-protocol PDUs; the security-protocol PDUs taking the form of 
electronic documents formatted according to a self-describing markup language. 

2. (currently amended) A security protocol exchange method according to claim 1, 
wherein said markup language is XML, at least one said electronic document being an 
XML document including a Document Type Declaration describing the PDU structure. 

3. (currently amended) A networked device including a security entity logically 
positioned between an application pro gram and a transport entity , the security entity 
being arranged to implement the method of claim 1 in respect of one said party and 
havingtH] an associated generator and interpreter of documents expressing security- 
protocol PDUs in terms of a said self-describing markup language. 

4. (original) A device according to claim 3, wherein said markup language is XML. 

5. (original) A device according to claim 3, wherein the transport entity is arranged to 
transport the XML documents using HTTP. 
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6. (original) A device according to claim 3, wherein the transport entity is arranged to 
transport the XML documents in e-mails. 



